$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer File: 1675ADC47F4873145B24769B8134062EEB020A6A.cer (raw, json) Hash identifier: U//QawXk7lasxuOFBabe38XUUS0nE0rgzYo3rJyfTjA= Subject key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0E42070749CBED2074182D5F5FE27DD160A1FEC9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:10 +0000 Certificate not after: Sun 02 May 2027 01:38:10 +0000 Subordinate resources: IP: 157.10.179.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:42:07:07:49:cb:ed:20:74:18:2d:5f:5f:e2:7d:d1:60:a1:fe:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:33:10 2026 GMT Not After : May 2 01:38:10 2027 GMT Subject: CN=1675ADC47F4873145B24769B8134062EEB020A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:37:b6:f0:c3:1e:96:6d:88:78:47:eb:3e: 8d:d6:04:fd:e0:55:3a:59:0b:cc:ae:b7:03:a2:67: 74:38:ad:dc:2b:48:74:1c:82:be:bf:c0:36:e5:f1: 80:da:00:d2:de:fe:31:94:2d:aa:bb:f8:54:22:90: ba:21:0e:bf:7a:d1:09:9e:8a:3c:5f:f0:f1:ad:29: f8:f0:fb:68:a7:07:22:0d:4b:8c:2c:96:cb:d6:60: 0d:81:93:b9:87:65:e9:79:10:98:9c:89:32:be:ff: 4c:1f:d4:15:ef:9b:56:32:ee:02:84:c0:fe:96:6c: a5:72:3f:90:e3:37:45:96:58:f3:06:08:c5:53:f2: b1:88:8b:06:3e:16:10:1b:bf:1f:10:73:7b:e4:00: 47:ed:06:db:b4:a6:9c:87:3b:e6:b2:44:de:3f:1d: 55:e4:c2:8b:c8:c6:6f:bf:0e:c9:53:41:c1:27:bf: 8a:0d:2b:5f:a7:23:e0:53:b0:16:81:32:70:a5:9b: 26:4e:ab:91:dd:75:39:d3:90:90:95:0b:c3:64:d1: 64:44:73:c0:9e:6e:ca:f9:c9:e9:9f:f8:e7:ee:00: 7d:36:7b:a6:bb:18:35:a6:d1:36:03:a1:98:79:1c: 13:50:b2:8a:0d:e0:28:68:30:7d:f5:b4:79:52:1e: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.179.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:84:46:ae:7c:ab:b5:2b:73:91:d2:a9:d4:88:c7:91:da:10: 1c:6c:e6:2a:4e:97:25:40:87:94:71:12:04:f3:5e:cb:fd:da: 4f:02:db:bd:41:07:2a:18:5f:b1:62:d6:2a:1b:ed:95:b8:d2: 19:fe:27:fa:39:dc:2d:bd:ee:be:98:7b:f4:20:27:ed:9e:af: 11:c5:36:ad:6b:2c:c7:0e:5f:40:60:a0:72:b7:03:bb:33:56: 4d:4c:32:23:24:46:a0:4d:db:14:54:d2:56:f1:08:9b:aa:cc: f3:76:dd:10:5c:78:3d:f5:f7:44:c4:3e:d5:f8:b0:c6:14:01: ff:f3:5b:7b:f2:12:6e:cc:c2:2d:2a:fa:29:75:28:14:4e:7a: aa:62:e4:02:3c:cc:28:32:f9:13:06:04:5b:4d:3f:22:12:e0: ad:3a:87:f6:b4:ea:b9:15:4e:7d:f6:14:cc:d9:87:04:56:a0: 2c:64:f5:12:24:cd:f6:8f:ae:36:f8:1b:f3:10:01:3b:b5:17: c8:89:2b:3b:26:54:d1:68:52:03:22:86:e1:c3:2d:0e:11:4a: aa:b6:a5:a9:f8:6f:ca:8e:3f:d1:54:00:2c:22:87:bc:67:8c: 5e:28:ad:14:83:1f:0d:3b:ef:98:bc:62:03:59:ad:36:27:5e: 30:f3:95:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDkIHB0nL7SB0GC1fX+J90WCh/skwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMzMxMFoX DTI3MDUwMjAxMzgxMFowMzExMC8GA1UEAxMoMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3 NjlCODEzNDA2MkVFQjAyMEE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx6N7bwwx6WbYh4R+s+jdYE/eBVOlkLzK63A6JndDit3CtIdByCvr/ANuXx gNoA0t7+MZQtqrv4VCKQuiEOv3rRCZ6KPF/w8a0p+PD7aKcHIg1LjCyWy9ZgDYGT uYdl6XkQmJyJMr7/TB/UFe+bVjLuAoTA/pZspXI/kOM3RZZY8wYIxVPysYiLBj4W EBu/HxBze+QAR+0G27SmnIc75rJE3j8dVeTCi8jGb78OyVNBwSe/ig0rX6cj4FOw FoEycKWbJk6rkd11OdOQkJULw2TRZERzwJ5uyvnJ6Z/45+4AfTZ7prsYNabRNgOh mHkcE1Cyig3gKGgwffW0eVIec0cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBZ1rcR/SHMUWyR2m4E0Bi7rAgpqMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4ZGMxM2ZmLTViMTAtNDRhNi1iNmYzLThmMDM1ZTU4OTdkOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOGRjMTNm Zi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC8xNjc1QURDNDdGNDg3MzE0 NUIyNDc2OUI4MTM0MDYyRUVCMDIwQTZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQqzMA0GCSqGSIb3DQEBCwUAA4IBAQCLhEaufKu1K3OR0qnUiMeR2hAcbOYq TpclQIeUcRIE817L/dpPAtu9QQcqGF+xYtYqG+2VuNIZ/if6Odwtve6+mHv0ICft nq8RxTatayzHDl9AYKBytwO7M1ZNTDIjJEagTdsUVNJW8Qibqszzdt0QXHg99fdE xD7V+LDGFAH/81t78hJuzMItKvopdSgUTnqqYuQCPMwoMvkTBgRbTT8iEuCtOof2 tOq5FU599hTM2YcEVqAsZPUSJM32j642+BvzEAE7tRfIiSs7JlTRaFIDIobhwy0O EUqqtqWp+G/Kjj/RVAAsIoe8Z4xeKK0Ugx8NO++YvGIDWa02J14w85VZ -----END CERTIFICATE-----Generated at Tue May 12 22:02:32 2026 by rpki-client